
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: ZIyAzpDaW+jrg6Xg1Lud+sMLJmtBeFCa1GgLVRwua+w=
Subject key identifier: 1F:18:32:6B:9E:27:DC:11:88:AA:6B:ED:65:A9:50:BD:58:CA:04:1F
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 01987BD2D1D0ABE716CEE6DDE58E08515F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:01:10 +0000
Manifest this update: Tue 05 Aug 2025 20:01:10 +0000
Manifest next update: Wed 06 Aug 2025 20:01:10 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: dgU2+Qho769GK9EPa3AYLLDSKsbKU1r8sdSBQ7lySmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:d1:d0:ab:e7:16:ce:e6:dd:e5:8e:08:51:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Aug 5 20:01:10 2025 GMT
Not After : Aug 6 20:01:10 2025 GMT
Subject: CN=1f18326b9e27dc1188aa6bed65a950bd58ca041f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:63:76:a0:31:5f:52:70:23:ae:74:5b:2b:
75:be:aa:f9:44:04:ae:72:59:9b:3d:10:f6:fc:1b:
6c:b2:f4:9f:e7:08:7b:ba:8d:7e:f8:71:eb:d6:71:
f5:6f:58:94:69:90:db:d0:8e:dc:32:f8:5a:85:7d:
2b:92:36:ce:4f:6f:dd:67:c9:3c:48:12:fe:37:31:
30:48:8e:2e:69:96:dc:19:a0:3d:68:c9:59:90:19:
c3:17:a4:70:95:3f:49:fb:00:cb:e5:26:79:e1:f1:
61:f2:0a:a0:fa:4f:c7:7c:f6:1d:41:d4:9a:08:0e:
76:40:90:8e:57:c8:78:bf:76:e8:43:e4:56:e9:db:
81:7e:f8:0d:db:85:47:bb:d7:01:68:7c:ae:45:5e:
e8:a7:16:4c:04:67:77:f5:92:34:5b:14:4a:f0:a0:
c7:a3:7f:ce:34:80:b9:2c:f9:48:2e:ff:01:06:ef:
17:51:02:6b:87:9e:54:8b:d4:c7:09:83:eb:10:91:
a7:6e:0c:d4:e1:50:0b:40:bf:32:a9:b9:9e:9b:b5:
7b:df:62:91:7e:6d:98:4c:ea:03:92:d7:63:b1:3f:
a0:5d:6a:77:58:62:2c:6e:50:07:68:ba:58:fd:7a:
b8:4a:ce:9f:05:29:75:78:0a:c3:91:73:dd:3c:8c:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:32:6B:9E:27:DC:11:88:AA:6B:ED:65:A9:50:BD:58:CA:04:1F
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1c:82:94:a1:be:62:be:24:70:31:87:c9:90:4d:5d:8b:50:
62:d7:e2:0f:e7:9e:3e:59:94:82:1e:1e:28:5b:ca:a3:3c:54:
46:d7:be:7c:94:93:e7:44:90:84:58:94:5e:74:71:b2:6f:bd:
51:3b:fe:0a:9e:d2:49:b3:82:92:2d:be:5e:b6:fa:e9:18:19:
61:af:ff:8b:3f:79:96:df:b4:ed:c8:df:89:9e:e4:74:2e:44:
f0:5f:40:ed:4b:7c:e9:dd:8f:df:c0:26:52:91:f1:1d:37:64:
85:d8:69:4f:41:f5:9a:eb:6c:4b:4a:5a:df:b7:09:1c:b1:10:
68:69:42:f4:06:5c:0c:43:1c:98:5f:0b:83:19:bb:64:64:e7:
03:36:c5:e0:33:af:8b:c7:04:e2:e5:19:8f:84:7a:f5:42:47:
17:bb:94:56:b0:2f:e5:a5:60:8b:f0:bd:e5:e3:98:5e:1a:54:
de:94:d3:7e:a6:a3:54:9a:47:c2:56:39:12:40:82:e3:20:3a:
92:0e:26:60:64:d2:b3:56:42:11:35:16:dc:2c:72:dd:5e:2f:
5d:4f:90:d7:df:8d:6a:0a:cc:80:aa:27:f1:19:c1:61:c5:47:
89:9c:e0:1d:36:7e:91:71:2e:bb:54:51:e9:6d:fd:88:8f:cb:
a5:6c:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:32 2025 by rpki-client